Ensures that users and IT components can reach only the IT resources and information they need for their work and are authorised for, and that unauthorised users and components are denied access, through the requirements with which institutions build a secure identity and access management. In Edition 2023 the Baustein carries 24 requirement numbers, 24 of them live: 11 Basis requirements (B, MUSS, to be fulfilled first and without exception), 10 Standard requirements (S, SOLLTE) and 3 requirements for elevated protection needs (H). It is applied to the information domain as a whole (overarching aspects) in modelling order R1. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as ORP.4.A<n>.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.